Verichains

August 2026

Harmony Cross-Shard Receipt Replay: The Mint of 3 Trillion ONE

On August 12, 2026, Harmony Protocol suffered an unauthorized mint of approximately 4B ONE (~26% of the ~15.01B supply) in the first confirmed wave …

Aug 21 • nt

2

July 2026

[PWN2OWN IRELAND 2025] Bypassing Authentication via Synology DS925+ SAML SSO

Bypassing Authentication via Synology DS925+ SAML SSO

Jul 31 • chanze

3

2

Lazy Summer Hack Analysis: Stale-Asset Donation and ERC-4626 Share-Price Manipulation

On July 6, 2026, the Lazy Summer Protocol suffered an exploit on Ethereum mainnet that resulted in approximately $6.04 million in losses across two USDC…

Jul 28 • elyuh3

LIEN FINANCE HACK ANALYSIS

Lien Finance is a decentralized finance (DeFi) protocol deployed on Ethereum, offering structured bond products through its BondMaker architecture - a…

Jul 27 • LCD

Drips Network: When Giving Became Receiving

Drips Network Exploit

Jul 24 • TK

Lumi Finance Exploit: ERC-1271 Bypass and Unauthorized Token Approvals in Sodium Smart Accounts

On July 13, 2026, an attacker drained approximately $270,000 in tokens from Sodium smart accounts associated with Lumi Finance on Arbitrum.

Jul 16 • lifebow

BFB Token Exploit Analysis

On July 8, 2026, the BFB token on BNB Smart Chain was exploited through a flaw in its custom "price-defense" deflationary logic, resulting in the loss…

Jul 13 • f4tu

June 2026

Gnosis Pay Exploit: The Devs Discovered the Bug, So Why Did the Attack Still Happen?

TL;DR: On June 1, 2026, Gnosis Pay lost about $265,000 to a hacker.

Jun 8 • th13vn

1

Two bytes to RCE: chaining rift + PoolSlip into an ASLR-independent nginx 1.30.0 exploit

Chaining nginx PoolSlip (CVE-2026-9256) + Rift (CVE-2026-42945) into an ASLR-independent RCE on the stock nginx:1.30.0 image; leak + 2-byte partial…

Jun 6 • y198

3

1

How Renouncing Ownership Opened a $98K Backdoor on ONTR Token

On May 28, 2026, the ONTR token on Ethereum was drained of approximately $98,315 in a matter of minutes.

Jun 2 • th13vn

May 2026

Aurellion Labs Hack Analysis: Diamond Proxy Uninitialized Facet Exploit

On May 12, 2026, Aurellion Labs, an Arbitrum-based DeFi protocol, suffered a security incident resulting in a loss of approximately $456K USDC.

May 19 • elyuh3